Vulnerabilities Patched in CrowdStrike, Tenable Products 2026-04-24 at 13:17 By Eduard Kovacs CrowdStrike has fixed a critical LogScale vulnerability, while Tenable addressed a high-severity Nessus flaw. The post Vulnerabilities Patched in CrowdStrike, Tenable Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Vulnerabilities Patched in CrowdStrike, Tenable Products Read More »
Recent Microsoft Defender Vulnerability Exploited as Zero-Day 2026-04-23 at 12:17 By Ionut Arghire The flaw allows attackers to access the SAM database, extract NTLM hashes, and gain System privileges. The post Recent Microsoft Defender Vulnerability Exploited as Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Recent Microsoft Defender Vulnerability Exploited as Zero-Day Read More »
Apple Patches iOS Flaw Allowing Recovery of Deleted Chats 2026-04-23 at 12:17 By Ionut Arghire Apple rolled out the security patches for dozens of iPhone and iPad models and generations. The post Apple Patches iOS Flaw Allowing Recovery of Deleted Chats appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Apple Patches iOS Flaw Allowing Recovery of Deleted Chats Read More »
Claude Mythos Finds 271 Firefox Vulnerabilities 2026-04-22 at 14:47 By Eduard Kovacs All the flaws could have also been found by an elite human researcher, according to Mozilla. The post Claude Mythos Finds 271 Firefox Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Claude Mythos Finds 271 Firefox Vulnerabilities Read More »
Google Antigravity in Crosshairs of Security Researchers, Cybercriminals 2026-04-22 at 13:47 By Eduard Kovacs Researchers discovered a remote code execution vulnerability and cybercriminals are using its reputation to deliver malware. The post Google Antigravity in Crosshairs of Security Researchers, Cybercriminals appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Google Antigravity in Crosshairs of Security Researchers, Cybercriminals Read More »
Oracle Patches 450 Vulnerabilities With April 2026 CPU 2026-04-22 at 11:49 By Ionut Arghire The company released 481 new security patches across 28 product families, including over 300 fixes for remotely exploitable, unauthenticated flaws. The post Oracle Patches 450 Vulnerabilities With April 2026 CPU appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]
Oracle Patches 450 Vulnerabilities With April 2026 CPU Read More »
Unsecured Perforce Servers Expose Sensitive Data From Major Orgs 2026-04-21 at 15:49 By Eduard Kovacs Things are improving, but a researcher has still identified over 1,500 Perforce P4 instances allowing attackers to read files on the server. The post Unsecured Perforce Servers Expose Sensitive Data From Major Orgs appeared first on SecurityWeek. This article is […]
Unsecured Perforce Servers Expose Sensitive Data From Major Orgs Read More »
Organizations Warned of Exploited Cisco, Kentico, Zimbra Vulnerabilities 2026-04-21 at 15:29 By Ionut Arghire CISA expanded the KEV catalog with eight flaws, but five of them have been flagged as exploited before. The post Organizations Warned of Exploited Cisco, Kentico, Zimbra Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]
Organizations Warned of Exploited Cisco, Kentico, Zimbra Vulnerabilities Read More »
Progress Patches Multiple Vulnerabilities in MOVEit WAF, LoadMaster 2026-04-21 at 15:29 By Ionut Arghire The security defects could be exploited for remote code execution, OS command injection, and WAF detection bypass. The post Progress Patches Multiple Vulnerabilities in MOVEit WAF, LoadMaster appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Progress Patches Multiple Vulnerabilities in MOVEit WAF, LoadMaster Read More »
Serial-to-IP Converter Flaws Expose OT and Healthcare Systems to Hacking 2026-04-20 at 20:37 By Eduard Kovacs Forescout researchers discovered 20 new vulnerabilities in Lantronix and Silex products and described theoretical attack scenarios. The post Serial-to-IP Converter Flaws Expose OT and Healthcare Systems to Hacking appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]
Serial-to-IP Converter Flaws Expose OT and Healthcare Systems to Hacking Read More »
Go With the Flow: Abusing OAuth Device Code Flow 2026-04-20 at 17:03 By Jakub Wiewiorski In early 2026, phishing attacks are still among the top contributors to the true positive detections in security operation centers (SOCs). Adversaries constantly come up with new ways of luring users into traps, concealing their actual intents and stacking anti-detection […]
Go With the Flow: Abusing OAuth Device Code Flow Read More »
Hackers Fail to Exploit Flaw in Discontinued TP-Link Routers 2026-04-20 at 11:16 By Ionut Arghire In-the-wild exploitation has been ongoing for a year, but no successful payload execution has been observed. The post Hackers Fail to Exploit Flaw in Discontinued TP-Link Routers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]
Hackers Fail to Exploit Flaw in Discontinued TP-Link Routers Read More »
RedSun and the Expanding Risk Window: Why Microsoft Defender Patching Can’t Wait 2026-04-17 at 21:02 By A newly disclosed zero-day vulnerability, dubbed RedSun, is raising fresh concerns for organizations relying on Microsoft Defender as a core layer of endpoint protection. Early indicators suggest similarities to the recently patched BlueHammer vulnerability (CVE-2026-33825), reinforcing a troubling trend: […]
RedSun and the Expanding Risk Window: Why Microsoft Defender Patching Can’t Wait Read More »
In Other News: Satellite Cybersecurity Act, $90K Chrome Flaw, Teen Hacker Arrested 2026-04-17 at 16:30 By SecurityWeek News Other noteworthy stories that might have slipped under the radar: ShinyHunters targets Rockstar Games, ShowDoc vulnerability exploited in the wild, and EPA to boost cybersecurity budget to $19 million. The post In Other News: Satellite Cybersecurity Act, […]
In Other News: Satellite Cybersecurity Act, $90K Chrome Flaw, Teen Hacker Arrested Read More »
Recent Apache ActiveMQ Vulnerability Exploited in the Wild 2026-04-17 at 14:32 By Eduard Kovacs The remote code execution vulnerability tracked as CVE-2026-34197 came to light in early April. The post Recent Apache ActiveMQ Vulnerability Exploited in the Wild appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Recent Apache ActiveMQ Vulnerability Exploited in the Wild Read More »
Cursor AI Vulnerability Exposed Developer Devices 2026-04-17 at 10:30 By Ionut Arghire An indirect prompt injection could be chained with a sandbox bypass and Cursor’s remote tunnel feature for shell access to machines. The post Cursor AI Vulnerability Exposed Developer Devices appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Cursor AI Vulnerability Exposed Developer Devices Read More »
Microsoft Paid Out $2.3 Million at Zero Day Quest 2026 Hacking Contest 2026-04-16 at 15:03 By Eduard Kovacs Researchers found more than 80 high-impact cloud and AI vulnerabilities during the event, which had a $5 million prize pool. The post Microsoft Paid Out $2.3 Million at Zero Day Quest 2026 Hacking Contest appeared first on […]
Microsoft Paid Out $2.3 Million at Zero Day Quest 2026 Hacking Contest Read More »
Splunk Enterprise Update Patches Code Execution Vulnerability 2026-04-16 at 15:03 By Ionut Arghire The flaw allows low-privileged users to upload files to a temporary directory to achieve remote code execution. The post Splunk Enterprise Update Patches Code Execution Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Splunk Enterprise Update Patches Code Execution Vulnerability Read More »
NIST Prioritizes NVD Enrichment for CVEs in CISA KEV, Critical Software 2026-04-16 at 15:03 By Ionut Arghire To optimize management of CVE volume, entries that do not meet specific criteria will not be automatically enriched. The post NIST Prioritizes NVD Enrichment for CVEs in CISA KEV, Critical Software appeared first on SecurityWeek. This article is […]
NIST Prioritizes NVD Enrichment for CVEs in CISA KEV, Critical Software Read More »
Cisco Patches Critical Vulnerabilities in Webex, ISE 2026-04-16 at 13:07 By Ionut Arghire The flaws can be exploited remotely to impersonate users or execute arbitrary commands on the underlying OS. The post Cisco Patches Critical Vulnerabilities in Webex, ISE appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Cisco Patches Critical Vulnerabilities in Webex, ISE Read More »